Главная
Study mode:
on
1
Hi! I'm Bella Wiseman
2
How Goldman Sachs Uses GatsbyJS
3
Open Source Licenses
4
Dependency Tree
5
What Changed? Nothing!
6
NPM Versioning
7
Mystery solved!
8
Don't be taken by surprise
9
Lock files!
10
Use npm ci in your builds
11
A Comparison
12
Fix the underlying issue
13
Package Maintenance Best Practices
14
About Goldman Sachs Engineering
15
Questions?
Description:
Explore a real-world case study of a mysteriously disappearing NPM dependency in this 23-minute conference talk. Trace the investigation from an internal repository issue to an unexpected change in a popular open-source library. Learn valuable best practices for development teams and open-source maintainers to ensure stable, successful, and policy-compliant JavaScript build pipelines. Discover the importance of lock files, proper NPM versioning, and using 'npm ci' in builds. Gain insights into package maintenance best practices and understand how seemingly unrelated changes can impact your project's dependency tree. Equip yourself with knowledge to prevent similar scenarios and maintain robust JavaScript development workflows.

Builds Today, Breaks Tomorrow: The Mystery of the Disappearing NPM Dependency

Linux Foundation
Add to list
0:00 / 0:00